Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/442a1650-1097-3c8f-bb50-b1330ee5059b.roa
File:                     442a1650-1097-3c8f-bb50-b1330ee5059b.roa (raw, json)
Hash identifier:          AqKkxIjPcqC2zoZlXvW88GGMRly97s/MYSUJs97zEeo=
Subject key identifier:   A1:36:16:B4:BF:56:DC:3A:BC:17:FA:CD:5C:35:D4:27:52:51:CF:0B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63D1CAE4ABEE5A1776680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/442a1650-1097-3c8f-bb50-b1330ee5059b.roa
Signing time:             Fri 12 Apr 2024 17:24:44 +0000
ROA not before:           Fri 12 Apr 2024 17:24:44 +0000
ROA not after:            Thu 11 Jul 2024 17:24:44 +0000
asID:                     136787
IP address blocks:        136.0.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 20:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3d:1c:ae:4a:be:e5:a1:77:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:44 2024 GMT
            Not After : Jul 11 17:24:44 2024 GMT
        Subject: CN=c0855a22-1270-4830-910a-c75769b80b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e8:48:8a:54:fb:0a:24:84:87:e8:82:32:ea:
                    0a:ed:a8:23:c2:8e:5c:ea:81:28:45:c6:bc:20:7e:
                    19:24:79:b0:5a:77:0f:aa:9d:30:e8:40:d8:85:25:
                    14:f3:76:e1:21:27:5e:26:43:28:c0:01:81:e2:2e:
                    9d:9d:51:1d:79:5b:3c:e3:dc:e0:32:d4:52:ae:f0:
                    07:ee:cd:da:d4:66:36:64:0c:f0:63:88:c7:aa:ce:
                    9b:05:0f:e2:18:a8:88:64:15:10:c3:c2:8b:ba:98:
                    ab:48:99:ea:9d:59:30:b2:58:37:84:fa:08:f5:d5:
                    02:24:ce:3a:a7:50:12:89:f0:f5:51:d8:58:f5:46:
                    a9:b6:9e:9c:39:3d:cc:9f:b6:c0:cc:c5:ae:01:5e:
                    ad:9c:e0:cb:03:f0:0d:dc:e4:da:20:6f:e1:f3:8d:
                    30:5c:c9:8e:8a:fb:8a:38:65:d1:e0:ce:57:ee:a1:
                    73:d7:43:76:6b:1e:fb:b7:3a:17:1d:16:b0:0a:a5:
                    1f:6f:80:51:34:c5:fe:30:42:4e:5e:11:96:59:c7:
                    51:9d:ec:86:1f:ce:d6:bc:e3:15:6a:07:d9:31:f3:
                    2a:e7:c1:46:30:f3:b8:85:da:b6:3e:ba:48:3d:3c:
                    f2:1e:8a:64:4c:44:74:45:8b:0c:10:20:8f:f0:e0:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:16:B4:BF:56:DC:3A:BC:17:FA:CD:5C:35:D4:27:52:51:CF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/442a1650-1097-3c8f-bb50-b1330ee5059b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3a:53:c9:a7:98:44:6c:8d:3c:ef:a6:0d:c7:2a:f4:8b:6d:
         41:39:fc:c5:df:7c:9f:65:cb:6f:a4:c1:95:fd:a3:4a:5f:81:
         b2:30:e2:82:6e:b4:bb:1c:17:dc:50:49:54:80:dc:00:5c:a9:
         16:a9:b8:65:10:00:a7:69:90:0f:35:cb:65:d3:cf:0d:b6:17:
         d6:bd:e6:b8:db:20:ab:41:df:66:42:1e:04:65:62:12:2e:fe:
         4c:8a:d3:9b:62:a0:62:d9:4a:86:a1:1b:9f:cf:77:9b:fc:a2:
         02:26:9a:0d:60:97:b6:c0:e2:fa:b4:cc:f6:34:43:17:73:97:
         2d:f5:09:b4:67:2a:cb:72:40:40:5d:d3:99:db:2e:b0:f0:1b:
         b5:9e:fe:69:fc:f5:5c:15:58:28:62:88:d8:dd:b7:e1:d0:be:
         5e:0e:99:78:64:29:56:d5:76:a7:76:8d:7b:1a:c7:48:fd:36:
         e2:f8:08:cd:cd:90:dd:0b:e1:54:3b:ba:fb:ad:ea:cf:2b:ec:
         62:40:13:c5:07:d5:51:34:27:3e:b8:00:a7:74:f1:2b:fd:9c:
         34:6a:30:1d:e6:0d:9d:6b:8e:4a:4d:12:67:96:fc:73:f3:c1:
         f4:89:3c:eb:5e:52:64:07:87:1c:32:a5:dc:4c:f7:47:7d:59:
         9f:6d:d5:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWF9j0crkq+5aF3ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDQxMjE3MjQ0NFoXDTI0MDcxMTE3MjQ0NFowLzEtMCsGA1UEAxMk
YzA4NTVhMjItMTI3MC00ODMwLTkxMGEtYzc1NzY5YjgwYjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ehIilT7CiSEh+iCMuoK7agjwo5c6oEoRca8
IH4ZJHmwWncPqp0w6EDYhSUU83bhISdeJkMowAGB4i6dnVEdeVs849zgMtRSrvAH
7s3a1GY2ZAzwY4jHqs6bBQ/iGKiIZBUQw8KLupirSJnqnVkwslg3hPoI9dUCJM46
p1ASifD1UdhY9Uaptp6cOT3Mn7bAzMWuAV6tnODLA/AN3OTaIG/h840wXMmOivuK
OGXR4M5X7qFz10N2ax77tzoXHRawCqUfb4BRNMX+MEJOXhGWWcdRneyGH87WvOMV
agfZMfMq58FGMPO4hdq2PrpIPTzyHopkTER0RYsMECCP8OD7CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKE2FrS/Vtw6vBf6zVw11CdSUc8LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDQyYTE2NTAtMTA5Ny0z
YzhmLWJiNTAtYjEzMzBlZTUwNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIE6U8mnmERsjTzvpg3HKvSLbUE5/MXffJ9ly2+kwZX9o0pfgbIw4oJu
tLscF9xQSVSA3ABcqRapuGUQAKdpkA81y2XTzw22F9a95rjbIKtB32ZCHgRlYhIu
/kyK05tioGLZSoahG5/Pd5v8ogImmg1gl7bA4vq0zPY0Qxdzly31CbRnKstyQEBd
05nbLrDwG7We/mn89VwVWChiiNjdt+HQvl4OmXhkKVbVdqd2jXsax0j9NuL4CM3N
kN0L4VQ7uvut6s8r7GJAE8UH1VE0Jz64AKd08Sv9nDRqMB3mDZ1rjkpNEmeW/HPz
wfSJPOteUmQHhxwypdxM90d9WZ9t1WI=
-----END CERTIFICATE-----